SCOM 2012 Maintenance Mode Script – Computer maintenance mode depending on SCCM 2012 collection membership

Maintenance mode is always something you are facing during System Center setups. Let’s say you have a SCCM administrator who want’s to deploy it’s Windows updates on a certain day e.g. Tuesday @ 08.00 p.m. o’clock, and he also decides to reboot each server forcefully after successful deployment. Because we (SCOM administrators) have to find a reliable way to put server objects in maintenance mode depending on the SCCM collection which will trigger the reboot of the servers.

I decided to write a script which will be triggered by a basic task on a management server and put all server in the concerning SCCM collection in maintenance mode.

I use a WMI connection to the SCCM server to retrieve the server objects in the collection. Maybe there is a better way to do it, let me know. Because of that I created a service account which will execute the scheduled basic task and therefore the script.

The triggering service account needs the following permission in SCCM to successfully connect to the SCCM collection WMI namespace.

In SCCM 2012 console go to “Administrative Users”…

…and assign the “Read-only Analyst” permission to the service account

In addition to that I assigned “Operations Manager Administrators” permission to the same service account.

Now you should be able to run the script successfully.

Script:

#Define the SCCM and SCOM server

$SCCMServer=”SCCM.domain.com”

$SCOMServer=”SCOM.domain.com”

#Define the SCCM collection

$CollectionName=’UPD – Server Patching Tuesday’

#Define the SCCM site name e.g. site_02

$SCCMWMINameSpace=”root\sms\site_s02″

#Define how many minutes the maintenance mode should run e.g.10 minutes

$Time = ((Get-Date).AddMinutes(10))

#Here you just deliver the comment and reason for the maintenance mode

$Comment = “Software Updates”

$Reason = “SecurityIssue”

#Valid inputs for $Reason: #PlannedOther,UnplannedOther,PlannedHardwareMaintenance,UnplannedHardwareMaintenance #PlannedHardwareInstallation,UnplannedHardwareInstallation,PlannedOperatingSystemReconfiguration #UnplannedOperatingSystemReconfiguration,PlannedApplicationMaintenance,ApplicationInstallation #ApplicationUnresponsive,ApplicationUnstable,SecurityIssue,LossOfNetworkConnectivity

#Import the Operations Manager module

Import-Module OperationsManager

#Get the objects from the SCCM collection using WMI

$Collection = Get-WmiObject -Namespace $SCCMWMINameSpace -ComputerName $SCCMServer -Query “Select * from SMS_Collection where name=’$CollectionName'”

$Collection.Get()

#Loop through each object in the collection

ForEach ( $CompInCol in $Collection.CollectionRules ) {

#Here we get the computer name out of the collection using the RuleName property

$Object= $CompInCol.RuleName

#Get instance of the computer object in SCOM

$ComputerClass = Get-SCOMClass -name:Microsoft.Windows.Computer

$ComputerInstance = Get-ScomClassinstance -Class:$ComputerClass | where {$_.Displayname -like “*$Object*”}

#Check if there is a valid instance in SCOM, it could be that the computer does exist in SCCM but is not monitored with SCOM

If ($ComputerInstance.Name -ne $null) {

#For the SCOM computer instance get the appropriate health service watcher

$HealthServiceClass = Get-SCOMClass -name:Microsoft.SystemCenter.HealthService

$HealthServiceWatcherClass = Get-SCOMClass -name:Microsoft.SystemCenter.HealthServiceWatcher

$HealthServiceWatcher = Get-SCOMClassInstance -Class:$HealthServiceWatcherClass | where{$_.Displayname -like “*$Object*”}

#Retrieve the appropriate health service

$Agent = Get-SCOMAgent | where {$_.Displayname -like “*$Object*”}

$HealthService = $Agent.HostedHealthService

#Start each maintenance mode for the health service watcher, health service and the computer instance

Start-SCOMMaintenanceMode -Instance $HealthServiceWatcher -EndTime $Time -Reason $Reason -Comment $comment

Start-SCOMMaintenanceMode -Instance $HealthService -EndTime $Time -Reason $Reason -Comment $comment

Start-SCOMMaintenanceMode -Instance $ComputerInstance -EndTime $Time -Reason $Reason -Comment $comment

}

}

I like …